๐ฉ๐ช
Dominik Lysiak
2026-10-02 15:40:26
(2 days ago)
104.199.183.206 - - [02/Oct/2026:17:40:22 +0200] "GET / HTTP/2.0" 404 179 "-" "Mozilla/5.0 (X11; Lin ...
show more
104.199.183.206 - - [02/Oct/2026:17:40:22 +0200] "GET / HTTP/2.0" 404 179 "-" "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36"
104.199.183.206 - - [02/Oct/2026:17:40:22 +0200] "POST / HTTP/2.0" 404 179 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)"
104.199.183.206 - - [02/Oct/2026:17:40:22 +0200] "GET /k0d2zqb6l3mgp4r47tlq HTTP/2.0" 404 179 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)"
104.199.183.206 - - [02/Oct/2026:17:40:22 +0200] "GET /f2s92c5pbatboo5gum2q HTTP/2.0" 404 179 "-" "Mozilla/5.0 (compatible; MistralAI-User/1.0; +https://mistral.ai/)"
104.199.183.206 - - [02/Oct/2026:17:40:22 +0200] "GET /model/info HTTP/2.0" 404 179 "-" "Mozilla/5.0 (compatible; xAI-Grok/1.0; +https://x.ai/)"
104.199.183.206 - - [02/Oct/2026:17:40:22 +0200] "GET /z9x8c7v6b5-debug-trigger-api.campertrader.de HTTP/2.0" 404 179 "-" "Mozilla/5.0 AppleWebKit/5
...
show less
Web App Attack
๐ฉ๐ช
snhosting
2026-10-02 14:08:50
(2 days ago)
104.199.183.206 - - [02/Oct/2026:16:08:39 +0200] "GET /js../.env HTTP/2.0" 200 1601 "-" "Mozilla/5.0 ...
show more
104.199.183.206 - - [02/Oct/2026:16:08:39 +0200] "GET /js../.env HTTP/2.0" 200 1601 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Perplexity-User/1.0; +https://perplexity.ai/perplexitybot)"
104.199.183.206 - - [02/Oct/2026:16:08:39 +0200] "GET /css../.env HTTP/2.0" 200 1606 "-" "CCBot/2.0 (https://commoncrawl.org/faq/)"
104.199.183.206 - - [02/Oct/2026:16:08:40 +0200] "GET /static//.env HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
104.199.183.206 - - [02/Oct/2026:16:08:40 +0200] "GET /static//app/.env HTTP/2.0" 200 1601 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.0 Safari/605.1.15 (Applebot/0.1)"
104.199.183.206 - - [02/Oct/2026:16:08:40 +0200] "GET /uploads../.env HTTP/2.0" 200 1606 "-" "Mozilla/5.0 (compatible; Bravebot/1.0; +https://brave.com/search/)"
...
show less
DNS Compromise
DNS Poisoning
Phishing
Email Spam
Brute-Force
Web App Attack
SSH
๐ฉ๐ช
curiosity
2026-10-02 13:38:08
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-path-traversal-probing
Web App Attack
Hacking
๐ฉ๐ช
mxbl
2026-10-02 12:30:05
(2 days ago)
Scanning for CMS vulnerabilities on a non-CMS system: /wp-json
Web App Attack
๐ฉ๐ช
ger-stg-sifi1
2026-10-02 12:20:55
(2 days ago)
(wordpress) Failed wordpress login using wp-login.php or xmlrpc.php
Web App Attack
Anonymous
2026-10-02 12:15:12
(2 days ago)
Aggressive web scan
Bad Web Bot
Web App Attack
๐ฉ๐ช
Manuel Braeuer
2026-10-02 11:43:50
(2 days ago)
104.199.183.206 - - [02/Oct/2026:13:43:49 +0200] "GET /model/info HTTP/1.1" 403 5677 "-" "Mozilla/5. ...
show more
104.199.183.206 - - [02/Oct/2026:13:43:49 +0200] "GET /model/info HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; KimiBot/1.0; +https://kimi.ai/)"
104.199.183.206 - - [02/Oct/2026:13:43:50 +0200] "GET /.well-known/jwks.json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36; compatible; OAI-SearchBot/1.4; +https://openai.com/searchbot"
104.199.183.206 - - [02/Oct/2026:13:43:50 +0200] "GET /api/config HTTP/1.1" 403 5677 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Claude-SearchBot/1.0; [email protected] )"
104.199.183.206 - - [02/Oct/2026:13:43:50 +0200] "GET /firebase-config.json HTTP/1.1" 403 5677 "-" "Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)"
104.199.183.206 - - [02/Oct/2026:13:43:50 +0200] "GET /wp-json HTTP/1.1" 403 5677 "-" "DuckAssistBot/1.1 (https://duckduckgo.com/duckassistbot)"
...
show less
Web App Attack
๐ฉ๐ช
jasperedv.de
2026-10-02 11:39:47
(2 days ago)
Apache Login - Brutforcing
Web App Attack
Brute-Force
๐ฉ๐ช
Hazzard
2026-10-02 10:53:55
(2 days ago)
(mod_security) mod_security triggered on hostname [redacted]): (CF_ENABLE)
SQL Injection
๐ฉ๐ช
pscriptos
2026-10-02 10:17:19
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-path-traversal-probing
Web App Attack
Hacking
๐ฉ๐ช
altenglaner
2026-10-02 08:42:36
(2 days ago)
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ba ...
show more
Web scanner probing for sensitive files (.env, .git, backups) or path traversal. Reported by fail2ban.
show less
Hacking
Web App Attack
๐ฉ๐ช
XICTRON
2026-10-02 08:35:04
(2 days ago)
ModSecurity rule violation detected by Fail2Ban
Web App Attack
๐ฉ๐ช
Marc
2026-10-02 07:15:43
(2 days ago)
104.199.183.206 - - [02/Oct/2026:09:15:42 +0200] "GET /secure HTTP/2.0" 404 291 "-" "Mozilla/5.0 (Wi ...
show more
104.199.183.206 - - [02/Oct/2026:09:15:42 +0200] "GET /secure HTTP/2.0" 404 291 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 104.199.183.206 - - [02/Oct/2026:09:15:42 +0200] "GET /account/login HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36" 104.199.183.206 - - [02/Oct/2026:09:15:42 +0200] "GET /reset-password HTTP/2.0" 404 269 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/152.0.0.0 Safari/537.36"
show less
Brute-Force
๐ฉ๐ช
FD-IX
2026-10-02 06:46:21
(2 days ago)
Fail2Ban: ModSecurity detected a web application attack.
Bad Web Bot
Web App Attack
Anonymous
2026-10-02 06:42:28
(2 days ago)
This IP was detected by CrowdSec triggering crowdsecurity/http-probing
Web App Attack
Hacking